Find out what an attacker can reach today.
We run an external penetration test against your internet-facing systems: automated attack testing, with every finding reviewed and validated by our in-house security team. Then we walk you through what we found and what to fix first. It costs nothing, and you're under no obligation.
How it works
Request
Fill in the short form below, or email Contact@adir.io with the subject "Free pen test request".
Scope it together
On a short call we agree which internet-facing systems to test and when. Scope is set per request.
Authorize in writing
Nothing is tested until someone with authority confirms in writing that you own or control the targets and agrees to the rules of engagement.
Test, validate, walk through
We run the test, our team validates every finding, then we walk you through them and a prioritized fix list. You keep the written report.
What you get
Included
- External, non-destructive testing of the internet-facing systems we agree on
- Findings ranked by severity, with evidence and how to fix each one
- Every finding reviewed and validated by our security team
- A walkthrough call with the people who validated the findings
- A written report you keep
Not included
- Internal network or authenticated application testing
- Social engineering or phishing
- Denial-of-service or any destructive testing
- Fixing the issues we find
- Compliance attestations: this is not a PCI ASV scan, a QSA assessment or a certification
Offer terms
- No cost, no obligation
- You won't be charged, and you don't need to buy anything, now or later.
- Authorization comes first
- We only test systems you own or are authorized to have tested, and only after written authorization from someone who can grant it. Systems hosted by a third party may need that provider's permission too.
- Scope agreed per request
- We agree the targets and testing window with you before we start. We may narrow the scope, or decline a request, if we can't test it safely or fairly.
- Rules of engagement
- Testing is non-destructive and stays inside the agreed window. You name the contacts we coordinate with, and you can pause or stop testing at any time.
- Who tests
- ADIR runs every test itself: automated attack testing, with each finding reviewed and validated by our in-house security team. We don't subcontract the work.
- Confidentiality
- Findings go only to the contacts you name. We're happy to sign a mutual NDA before we start.
- One per organization
- The offer is one free test per organization. We may change or end the offer in the future; requests we've already accepted are honored.
Questions about these terms? Email Contact@adir.io.
Request your free pen test
Tell us a little about your organization and we'll reply to set up the scoping call. Prefer email? Write to Contact@adir.io with the subject "Free pen test request".